Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
File:                     df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json)
Hash identifier:          Hg7dZDa4Yc0RCtdX6QHgN7LqrZ+MHNCdiHu58tg4T2A=
Subject key identifier:   C9:4C:C7:24:FD:0B:49:90:A6:6B:09:20:74:4D:60:CA:BA:37:55:38
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F43285849F9DFE0175A52E6A15F6E0980
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     53454
IP address blocks:        104.225.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:e0:17:5a:52:e6:a1:5f:6e:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=6100d6af-b5a9-4892-9615-8cb19df97b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:ce:5d:cc:36:be:d5:d0:4e:9d:90:aa:c9:
                    13:a4:18:a4:76:88:bb:a2:55:62:27:79:ad:da:66:
                    60:b2:f9:bc:35:23:9a:06:24:c2:a5:d4:19:fa:f2:
                    b3:2c:8a:38:85:b6:f2:c2:3a:b9:cb:79:ae:5b:42:
                    37:ba:63:7a:54:66:30:b6:25:a5:e1:66:a3:35:fe:
                    e7:6b:36:39:ec:df:cb:5a:23:c0:a6:b7:11:bc:31:
                    24:c0:f8:7d:2e:6f:92:61:c0:f1:e7:0f:33:2a:90:
                    5a:64:d3:10:68:29:b1:08:b5:40:a5:0e:94:b1:ad:
                    0d:eb:c4:4c:de:cd:cd:dc:b6:46:8a:3d:5c:8b:a9:
                    aa:98:1c:b7:89:e2:df:7b:7c:22:b4:a6:2d:de:55:
                    7f:94:eb:51:ff:37:eb:08:72:86:b7:26:c4:3d:dd:
                    8f:af:b0:e1:65:42:e6:27:74:f1:88:40:d7:24:54:
                    a1:28:8b:bc:b8:8f:5f:3f:9f:63:25:f0:be:30:cd:
                    db:e1:e8:a7:3a:89:40:fe:c5:61:82:69:47:f1:c1:
                    04:f9:16:a8:b8:cf:3d:40:0b:49:c1:b0:e2:65:e4:
                    3c:71:98:0b:78:fb:e4:0e:b4:55:2d:0e:47:b1:e3:
                    d0:2b:b6:f7:3b:24:0c:35:09:fe:b6:8d:44:a2:3c:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:C7:24:FD:0B:49:90:A6:6B:09:20:74:4D:60:CA:BA:37:55:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d9:61:2e:cb:26:7e:c1:45:d0:13:83:95:b9:4d:fa:01:4c:
         ad:99:92:c5:3a:3c:72:d8:2c:d3:3d:40:a5:2b:08:90:fc:fd:
         6f:30:e2:26:70:ec:6d:f7:7a:96:2c:62:5e:4c:3e:3d:89:b3:
         f3:45:89:c7:73:21:47:28:59:ca:c4:3b:50:0e:70:c7:f3:dc:
         0e:51:b9:bc:3f:7d:0b:d2:5d:2d:e3:63:d2:89:7c:10:8e:d8:
         1f:07:80:45:6a:07:60:84:bd:82:b6:dd:88:f3:69:7f:84:ad:
         33:8d:96:27:75:f0:88:14:42:6c:55:a8:f7:dc:08:96:ce:db:
         19:99:2d:bc:a5:21:9b:ba:ee:3b:de:b5:53:cb:2d:76:e2:6a:
         5d:71:b7:7e:1b:fc:2a:9b:25:9b:54:fd:3c:f2:bd:f1:2b:83:
         e4:91:4b:54:93:ef:14:45:54:99:10:af:40:a9:76:7d:c2:7f:
         52:89:b5:cb:b1:fe:12:33:b2:55:50:e2:af:b6:d6:b8:b0:4c:
         da:87:40:e6:22:1b:90:b6:c6:cf:b5:f5:c8:4e:3a:14:2e:0c:
         3b:51:df:94:bb:a8:80:26:ff:df:eb:1a:d2:8a:73:28:91:0c:
         cb:e2:a7:b2:08:3e:a3:ea:1d:80:d6:39:f6:2f:4d:a9:6a:c0:
         c1:b4:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:36:10 2025 by rpki-client